Belkin F5D7234-4 v5

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Belkin F5D7234-4 v5

Manuf (OEM/ODM): Arcadyan WG4005H

FCC approval date: 17 September 2009
Country of manuf.: China

Type: wireless router

Power: 12 VDC, 1 A
Connector type: barrel

CPU1: Broadcom BCM5355A1 (333 MHz)
FLA1: 2 MiB 2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br /> (Winbond 25Q16BVSIG)
RAM1: 8 MiB 8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Winbond W9864G6IH-6)

Expansion IFs: none specified
Serial: yes, internal, unpopulated, 3.3V TTL, J102, (115200,8,N,1)

WI1 chip1: Broadcom BCM5355A1
WI1 802dot11 protocols: bg
WI1 antenna connector: none

ETH chip1: Broadcom BCM5355A1
Switch: Broadcom BCM5355A1
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

bg

Stock bootloader: CFE vendor modified

Stock FW OS: SuperTask!

Default SSID: Belkin_G_Wireless_XXXXXX (2 addl. devices)
Default IP address: 192.168.2.1
the IP 192.168.2.1 is used by 295 additional devices
of which 97 are Belkin devices

802dot11 OUI: 94:44:52 (17 E, 22 W)
Ethernet OUI: 94:44:52 (17 E, 22 W)

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

G Wireless Router


 • Support page

"P/N: 141700520016J R01" is silkscreened on the board.

Per the below boot log, BCM5355 is presumed to be quite similar (if not identical) to BCM5356.

The default SSID is Belkin_XXXXXX where XXXXXX is the last 3 octets of the WLAN MAC address (w/ uppercase letters).

Additional external links

Images

  • board top

  • board top, shield removed

  • CPU

scans

  • board top

  • board bottom

Serial

Pinout

<---- to BCM5355A1
                J102
       (GND) (RxD) (TxD) [3.3]

Info derived from

 • boot log 
Decompressing...done
Decompressing...done
Init Arena
Init Devs.
Boot partition size = 131072(0x20000)
Found a 2MB ST compatible serial flash
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.36
CPU type 0x19749: 333MHz
Tot mem: 8192 KBytes

CFE mem:    0x80700000 - 0x807DDF20 (909088)
Data:       0x80733CD0 - 0x80736F30 (12896)
BSS:        0x80736F30 - 0x80777F20 (266224)
Heap:       0x80777F20 - 0x807DBF20 (409600)
Stack:      0x807DBF20 - 0x807DDF20 (8192)
Text:       0x80700000 - 0x80733CC8 (212168)


Copying boot params.....DONE

Arcadyan bootloader version 1.18 boot_version 1.18
Press space bar to cancel startup...
Device eth0:  hwaddr 94-44-52-05-86-7D, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: [ZIP 3] [ZIP 1]  done 0 bytes read
Entry at 0x80002000
Closing network.

In c_entry() function ...
[Init_TFTP_buffer_behind_end] TFTP_buffer = 806b5704
CPU ProcId is: 0x00019749, options: 0x000021cd
CPU: BCM5356 rev 1 at 333 MHz
install_exception
Set C0 SR to 0x10000000
Co config = 80240483
sys_irq_init ...
Before entering coretest_main
##### _ftext      = 0x80002000
##### _fdata      = 0x80214E50
##### __bss_start = 0x802655EC
##### end         = 0x80695574
##### Backup Data from 0x806B5704 to 0xBFDA0000~0xBFDF079C len 329628
Found a 2MB ST compatible serial flash
[initialize_data_area] DATA area was already backuped in flash ..
[INIT] System Log Pool startup ...
[INIT] MTinitialize ..
[INIT] usrclk
CPU Clock 300000000 Hz
mips_counter_frequency:150000000
r4k_offset: 0x000249f0(150000)
init_US_counter : time1 = 268824 , time2 = 32268893, diff 32000069
US_counter = 64
 cnt1 33228195 cnt2 33229888, diff 1693
r4k_cur:0x0206a720(-2140547900)
End of usrclk_init
mips_int_enable: 5
mips_int_enable 1: s = 8000
mips_int_enable 2: s = 8000
mips_int_enable 3: s = 0
Runtime code version: 5.00.12
System startup...
[INIT] Memory COLOR 0, 810000 bytes ..
[INIT] Memory COLOR 1, 400000 bytes ..
[INIT] Memory COLOR 2, 401200 bytes ..
PCI: no core
[pci_alloc_bus] alloc memory 80406d3c
[pci_do_scan_bus]Scanning bus 00
Found bus:devfn[vid/did]class header_type 00:00 [14e4/0800] 000501 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x800 devfn= 0x0
PCI: Calling quirk 800D3CAC for 00:00.0
Found bus:devfn[vid/did]class header_type 00:08 [14e4/4338] 000280 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x4338 devfn= 0x8
PCI: Calling quirk 800D3CAC for 00:01.0
Found bus:devfn[vid/did]class header_type 00:10 [14e4/4715] 000200 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x4715 devfn= 0x10
PCI: Calling quirk 800D3CAC for 00:02.0
Found bus:devfn[vid/did]class header_type 00:20 [14e4/0835] 00ffff 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x835 devfn= 0x20
PCI: Calling quirk 800D3CAC for 00:04.0
Fixups for bus 00
PCI: Fixing up bus 0
Bus scan for 00 returning with max=00
[pci_fixup_device]: vendor= 0x14e4 dev=0x800 devfn= 0x0
[pci_fixup_device]: vendor= 0x14e4 dev=0x4338 devfn= 0x8
[pci_fixup_device]: vendor= 0x14e4 dev=0x4715 devfn= 0x10
[pci_fixup_device]: vendor= 0x14e4 dev=0x835 devfn= 0x20
RUNTASK id=1 iNetTask ...
[generic_flash_id_ok] flash already initialized ..

SFLASH Init OK!
FLASH boot parameter signature found!!
Boot Parameters found !!!
Bootcode version: 1.18
Serial number: 12943723419907
Hardware version: 01


sizeof(struct III_Config_t) is 70880, nLen:70880, Magic:0xffffffff
!![E-CFG-VER] Configuration data version mismatch!!
!![E-CFG-VER] Adapting factory defaults!!
!![E-CFG-VER] Reconfiguration required!!
!!No configuration file present!!
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=160 BUF_ALIGN_SZ=24 BUFFER_OFFSET=384
BUF_BUFSZ0=608 BUF_BUFSZ1=2272
NUM_OF_B0=0 NUM_OF_B1=500
BUF_POOL0_SZ=0 BUF_POOL1_SZ=1216000
sizeof(BUFFER0)=768,sizeof(BUFFER1)=2432
*BUF0=0x805a4cbc *BUF1=0x8047be9c
Altgn *BUF0=0x805a4cc0 *BUF1=0x8047bea0
End at BUF0:0x805a4cc0, BUF1:0x805a4ca0

buffer0 pointer init OK!
buffer1 pointer init OK!
ifno=  0, Link_Type= 4
Interface 0 ip = 127.0.0.1

ifno=  1, Link_Type= 1
[pci_set_master]
PCI: Enabling bus mastering for device 00:02.0
PCI: Setting latency timer of device 00:02.0 to 64
[pci_enable_device]
[pci_set_power_state] dev->device=0x4715 state=0
[dma64_alloc] alloc 128 dma tx descriptor size=10240(0x2800)
[dma64_alloc] alloc 256 dma rx descriptor size=12288(0x3000)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
mips_int_enable: 2
mips_int_enable 1: s = 8000
mips_int_enable 2: s = 9000
mips_int_enable 3: s = 0
: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.46
MAC Address: 94:44:52:05:86:7d
Interface 1 ip = 192.168.2.1

ifno=  2, Link_Type= 1
hwlan_init(239): [HWLAN] ifno=2 irno=7 port=0x00000000
[hwlan_init] if_table[2]::94-c0-a8-02-01-02
[hwlan_init] if_table[2]::94-44-a8-02-01-02
[hwlan_init] if_table[2]::94-44-52-02-01-02
[hwlan_init] if_table[2]::94-44-52-05-01-02
[hwlan_init] if_table[2]::94-44-52-05-86-02
[hwlan_init] if_table[2]::94-44-52-05-86-7d
[pci_enable_device]
[pci_set_power_state] dev->device=0x4338 state=0
[pci_set_master]
PCI: Enabling bus mastering for device 00:01.0
PCI: Setting latency timer of device 00:01.0 to 64
RUNTASK id=2 rapi_tmr_task ...
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma rx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
mips_int_enable: 1
mips_int_enable 1: s = 9000
mips_int_enable 2: s = 9800
mips_int_enable 3: s = 0
: Broadcom BCM4338 802.11 Wireless Controller 5.10.56.46
Interface 2 ip = 192.168.2.1

ifno=  3, Link_Type= 1
MAC Address: 94:44:52:05:86:7e
iput_IpLinkUp(ifno=3)> ifp->add_default_route:1
Re-Init NAT data structure
Init NAT data structure
Interface 3 ip = 0.0.0.0

ifno=  4, Link_Type= 0
ifno=  5, Link_Type= 0
ifno=  6, Link_Type= 0
ifno=  7, Link_Type= 0
ifno=  8, Link_Type= 0
ifno=  9, Link_Type= 0
ifno= 10, Link_Type= 0
ifno= 11, Link_Type= 0
ifno= 12, Link_Type= 0
ifno= 13, Link_Type= 0
ifno= 14, Link_Type= 0
ifno= 15, Link_Type= 0
ifno= 16, Link_Type= 0
Init NAT data structure
No default route, no need to reinit the NAT data structure
RUNTASK id=5 if_task if0...
RUNTASK id=6 if_task if1...
RUNTASK id=7 if_task if2...
RUNTASK id=8 if_task if3...
RUNTASK id=9 timer_task...
RUNTASK id=10 conn_mgr...
RUNTASK id=11 main_8021x...
RUNTASK id=12 main_lltd...
RUNTASK id=13 period_task...
RUNTASK id=14 dhcp_daemon...
RUNTASK id=15 dhcp_clt...on interface 3

[flash_init] PFS web (bfcf2c00) in flash ...
[flash_init] set drive_start_addr[0] as bfcf2c00
httpd: listen at 192.168.2.1:80
RUNTASK httpd...
RUNTASK id=18 dnsproxy...
RUNTASK id=19 dhcpd_mgmt_task...
UPnP is enabled
UPNP Device initialize success! slot=20

>>> belkin_wan_cfg task runs successfully, task_id = 21
gConfig.WSC_Mode:1
RUNTASK id=22 wscmain...
RUNTASK id=23 wsc_Send_eap_packet...
RUNTASK id=24 wsc_Send_UPNP_packet...
RUNTASK id=25 WSC_WaitUserAction_Task...
gConfig.WSC_Mode:1
Starting Multitask...
gSetting.lang_id = 0
run_project_task
RUNTASK id=26 apAppInit...
ifno2dot1x_if[2]=0
dot1x_wireless_if_mask=0x4
[reset_802dot1x] wireless module ready
[wl_open] done
[HWLAN] Ready
[init_wpa] dot1x_ready[0]=1
[reset_802dot1x] 802.1Xv2 ready
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.02, Sep 10 2009 19:52:55
*********************************************
Initializing stack...
---------in wsc init----------
----------sizeof(uint32)=4
----------sizeof(uint-long)=4
----------sizeof(uint32)=2
[22]pthread_cond_init: 0
[22]pthread_mutex_init: resource No. 33
[22]pthread_mutex_init: resource No. 34
[PORTABLITY]:WscCreateThread--------------------
 @#*@#*@#*EAP-WSC: Entered eap_wsc_init *#@*#@*#@
Entered udp_read
wsc_Send_eap_packet:udpFdupnp_wcn:15;;udpFdupnp:17
WscCmd:ActualCBThreadProc: Started
GenaInit : event_hook is NULL!!
[htf_dbg]     - OnlineActiveWirless() 2000
###BCM5356 region was set when setting country code###
Chanspec set to 0x2b06
Setting Wireless Country Code : 0x348
Setting DTIMPeriod : 1
Setting BeaconPeriod : 100
Setting gfragThreshold:2346
Setting grtsThreshold:2347
Setting PreambleType:0
Setting TxBurst:1
Setting TxAntenna:3
wme_ac ap bk ecwmax 6 ecwmin 3 txop 0 aifsn 3 acm 0
wme_ac ap be ecwmax 10 ecwmin 3 txop 0 aifsn 7 acm 0wme_ac ap vi ecwmax 5 ecwmin 3 txop 94 aifsn 1 acm 0wme_ac ap vo ecwmax 3 ecwmin 2 txop 47 aifsn 1 acm 0wme_ac sta bk ecwmax 10 ecwmin 4 txop 0 aifsn 3 acm 0wme_ac sta be ecwmax 10 ecwmin 4 txop 0 aifsn 7 acm 0wme_ac sta vi ecwmax 4 ecwmin 3 txop 94 aifsn 2 acm 0wme_acSetting APSDCapable:0
Setting GF_Mode:0
Setting ShortGI 20MHz:1 40MHz:1
Setting Mpdudensity:6
Setting AMSDU enable:0
[22]pthread_cond_init: 1
[22]pthread_mutex_init: resource No. 35
[22]pthread_mutex_init: resource No. 36
[PORTABLITY]:WscCreateThread--------------------
 WscCmd:ActualUIThreadProc: Started.
ActualUIThreadProc: wait q
MasterControl constructor
WscCmd::MC instantiated ok
[22]pthread_cond_init: 2
[22]pthread_mutex_init: resource No. 37
[22]pthread_mutex_init: resource No. 38
[PORTABLITY]:WscCreateThread--------------------
 [22]pthread_mutex_init: resource No. 39
[PORTABLITY]:pthread_mutex_init--------------------
 CTransport Construction
[22]pthread_cond_init: 3
[22]pthread_mutex_init: resource No. 40
[22]pthread_mutex_init: resource No. 41
[PORTABLITY]:WscCreateThread--------------------
 In CTransport::ActualCBThreadProc
ActualCBThreadProc: Calling Dequeue
MC::Init: Init complete ok
WscCmd::MC intialized ok
WscCmd::Init ok, starting stack...
Info::ReadConfigFile: Called
Info::ReadConfigFile:|▒ ▒
Info::ReadConfigFile:File open ok
******************uuid_p:0x0000000000000001100094445205867d*****
mp_deviceInfo->uuid[i]:
0-0-0-0-0-0-0-1-10-0-94-44-52-5-86-7d-
mp_deviceInfo->macAddr:94:44:52:05:86:7D
gSetting.dot1x.if_entry[0].enableWEP:0
authTypeFlags is 1 ,encrTypeFlags is 1 ,m_nwKey is , key len is 0
 ssid is Belkin_G_Wireless_05867D
S, be9
E, e14
RegistrarSM constructor
[22]pthread_cond_init: 4
[22]pthread_mutex_init: resource No. 42
[22]pthread_mutex_init: resource No. 43
[PORTABLITY]:WscCreateThread--------------------
 [22]pthread_mutex_init: resource No. 44
[PORTABLITY]:pthread_mutex_init--------------------
 RegistrarSM constructor
[22]pthread_cond_init: 5
[22]pthread_mutex_init: resource No. 45
[22]pthread_mutex_init: resource No. 46
[PORTABLITY]:WscCreateThread--------------------
 c_devPwd:org:57319001
Generated devPwd:▒<▒29▒▒<▒J▒
in startMonitor....
CInbEap Construction
Sizeof(WSC_NOTIFY_DATA) = -2143500496
---test--sizeof(WSC_NOTIFY_DATA) = 36
[22]pthread_cond_init: 6
[PORTABLITY]:WscCreateEvent--------------------
 Entered udp_open
Socket open successful, sd: -2143500512
Entered udp_open
Socket open successful, sd: -2143500512
Entered udp_bind
Binding successful for socket [-2143500528]
[PORTABLITY]:WscCreateThread--------------------
 In CInbEap::StaticRecvThread
CInbEap::ActualRecvThread Started
Entered udp_read
in startMonitor....
CInbUPnPDev Construction
Entered udp_open
Socket open successful, sd: -2143500512
Entered udp_open
Socket open successful, sd: -2143500512
Entered udp_bind
Binding successful for socket [-2143500528]
CInbUPnPDev StartMonitor
[PORTABLITY]:WscCreateThread--------------------
 MC::SwitchModeOn: Exit
MC::StartStack: Informing app of mode
In CInbUPnPDev::StaticUPnPThread
end UPnPCreateMicroStack
Entered udp_read
-WscCmd::CallbackProc Enqueue done
MC::SwitchModeOn: Done callback
exit wscmain
@@[27]pthread_mutex_unlock: the res is free 33-- -2145355960
WscCmd:ActualCBThreadProc: CB_MAIN_PUSH_MODE recd

******* MODE: Access Point *******
-@@[26]pthread_mutex_unlock: the res is free 35-- -2145354288
*******p_header->eType:1

Options:
0. Quit
1. Get configured
2. Get configured via push-button
3. Get configured using IEs
Enter selection: ***gp_mc->mp_info->GetSwitchMode():1
mp_info->GetSwitchMode():1:e_currMode:1,,e_targetMode:3
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
********cp_devPwd:57319001*****
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
MC::SetBeaconIE: call to trans->SetBeaconIE() ok
MC::SetProbeRespIE: call to trans->SetProbeRespIE() ok
Waiting for Registrar to connect...
WscCmd::unconfig initiated
ActualUIThreadProc: wait q
Retrieved from "https://wikidevi.wi-cat.ru/index.php?title=Belkin_F5D7234-4_v5&oldid=244955"